In GraphicsMagick 1.3.26, an allocation failure vulnerability was found in the function ReadMNGImage in coders/png.c when a small MNG file has a MEND chunk with a large length value.
CVSS Details
- CVSS 3.0 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade graphicsmagick | Aug 22, 2024 | Aug 23, 2017 |
| Amazon_linux | — | Upgrade GraphicsMagick | Mar 9, 2018 | Aug 23, 2017 |
| Debian | — | Upgrade graphicsmagick | Jul 30, 2024 | Aug 23, 2017 |
| Suse | — | Upgrade GraphicsMagickUpgrade ImageMagickUpgrade libGraphicsMagick2Upgrade ImageMagick-config-6-upstreamUpgrade perl-GraphicsMagickUpgrade libMagick++-develUpgrade perl-PerlMagickUpgrade ImageMagick-config-6-SUSEUpgrade libMagickWand1Upgrade libMagickCore1-32bitUpgrade libMagickCore1Upgrade libMagick++1Upgrade libMagickWand1-32bitUpgrade libMagick++-6_Q16-3Upgrade ImageMagick-develUpgrade libMagickCore-6_Q16-1Upgrade libMagickCore-6_Q16-1-32bitUpgrade libMagickWand-6_Q16-1 | Jan 26, 2018 | Aug 23, 2017 |
| Ubuntu | — | Upgrade graphicsmagickUpgrade libgraphicsmagick-q16-3Upgrade libgraphicsmagick++-q16-12 | Dec 3, 2019 | Aug 23, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub